[hunchentoot-devel] Chained SSL-certificates support

[Steffen Schulz]

Hi,


I had a similar problem some time ago but no time to investigate.

I think the chain cert must be provided at a separate place in the SSL
handshake. There's a special openssl function and it seems to be
exported in cl+ssl:

| CL+SSL:USE-CERTIFICATE-CHAIN-FILE (certificate-chain-file)
| 
| Loads a PEM encoded certificate chain file certificate-chain-file and
| adds the chain to global context. The certificates must be sorted
| starting with the subject's certificate (actual client or server
| certificate), followed by intermediate CA certificates if applicable,
| and ending at the highest level (root) CA.


So its probably not very hard. There was also a patch available
somewhere online but it didn't work for me back then.



HTH,
Steffen